DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
dnsmasq: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2021-01-18
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in dnsmasq und mehreren Cisco Produkten ausnutzen, um beliebigen Programmcode auszuführen und um den DNS Cache zu manipulieren.
01
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-25687US | medium5.9 | — | ||
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. Thi… | ||||
| CVE-2020-25686US | low3.7OT erhöht | Exploit | ||
A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By def… | ||||
| CVE-2020-25682US | high8.1 | — | ||
A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names from DNS packets before validating them with DNSSEC data. A… | ||||
| CVE-2020-25681US | high8.1 | — | ||
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the net… | ||||
| CVE-2020-25685US | low3.7 | — | ||
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), which is the forwarded query that matches t… | ||||
| CVE-2020-25684US | low3.7 | — | ||
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:reply_query() if the reply destination address/port is… | ||||
| CVE-2020-25683US | medium5.9 | — | ||
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A r… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- CentOS Security Advisory CESA-2021:0153 vom 2021-01-26external
- Oracle Linux Security Advisory ELSA-2021-0153 vom 2021-01-19external
- Changelog dnsmasqexternal
- Red Hat Security Advisory RHSA-2021:0150 vom 2021-01-19external
- Red Hat Security Advisory RHSA-2021:0151 vom 2021-01-19external
- Red Hat Security Advisory RHSA-2021:0152 vom 2021-01-19external
- Red Hat Security Advisory RHSA-2021:0153 vom 2021-01-19external
- Red Hat Security Advisory RHSA-2021:0154 vom 2021-01-19external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan